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AMENDMENTS TO THE CLAIMS; 

This listing of the claims will replace all prior versions, and listings, of the claims in this 
application. 

Listing of Claims; 

1 . (Currently Amended) A method, comprising: 

using a sp e cific record an authorization and authentication profile associated with a 
use r, wh e rein th e sp e cific r e cord is stored at a s e rv e r node , including 

the authorization and authentication profile is sent from an authentication and 
authorization device located in a home network to a server node; and 

the authorization and authentication profile is stored at the server node, wherein 
the sp e cific r e cord authorization and authentication profile contains information that 
determines that a us e r charact e riotio is to b e v e rified which allows the server node to 
authorize and authenticate the user directly without contacting the authentication and 
authorization device with a home n e twork prior to providing acc e ss to said service , and 
wherein the authorization and authentication profile fiirther contains information defining that 
the authentication and authorization device is to be contacted for the user is verified when die 
a number of simultaneous sessions for the user is equal to a predetermined number. 

2. (Currently Amended) The method as claimed in claim 1, fiirther comprising: 
transferring said information firom an auth e ntication, authorization and accounting 

home server the authentication and authorization device to the server node in at least one of a 
signaling path for a service setup, a service events er and a registratio n, or a combination 
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th e r e of . 

3. (Currently Amended) The method as claimed in claim 1, furth e r compriaing: 
deciding, based on wherein said information indicates , that at least one of the 

authentication of and authorizatio n, or both , needs to be verified. 

4. (Currently Amended) The method as claimed in claim 1 , further comprising: 
performing at least one of the authentication of and the authorizatio n, or both, of the 

user . 

5. (Currently Amended) The method as claimed in claim 4, further comprising: 
performing at least one of the authentication er and the authorizatio n, or both, of the 

user by using an authentication, authorization and accounting home server the authentication 
and authorization device . 

6. (Currently Amended) The method as claimed in claim 4, furth e r comprising: 
performing where at least one of the authentication or and the authorizatio n, or both, 

of the user is performed in the server node when the required parameters are available. 

7. (Currently Amended) A method, comprising: 

using a user specific record an authorization and authentication profile associated with 
a user, wherein the authorization and authentication profile is received firom an authentication 
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and authorization device located in a home network, wherein the us e r sp e cific r e cord 
authorization and authentication profile is stored in a server nod e, wherein the authorization 
and authentication profile contains information which allows the server node to authorize and 
authenticate the user directly without contacting the authentication and authorization device, 
and wherein the information fiirther includes that indicates a condition that, when satisfied, 
determines that a user charact e ristic is to be verified with a hom e network prior to providing 
acc e ss to a s e rvice the authentication and authorization device is to be contacted : and 

providing access to smd a service responsive to said user specific record authorization 
and authentication profile , wherein the condition is that authorization and authentication is 
verified with the authentication and authorization device when the a number of simultaneous 
sessions is equal to a predetermined number. 

8. (Currently Amended) The method as claimed in claim 7, fiirther comprising: 
determining whether said condition is satisfied; and 

providing access to said service without verifying said user characteristic authorizing 
and authenticating the user when said condition is not satisfied. 

9. (Currently Amended) The method as claimed in claim 7, fiirther comprising: 
determining whether said condition is satisfied; 

v e rifying said us e r charact e ristic authorizing and authenticating the user when said 
condition is satisfied; and 

subsequent to said verif y ing of the u se r charact e risti c authorizing and authenticating 
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the user , providing access to said service when said us e r charact e ristic authorizing indicates 
that the user is permitted to access said service. 

10. (Previously Presented) The method as claimed in claim 7, further comprising: 

determining whether said condition is satisfied when a call session between said user 
and a service provider node is initiated. 

1 1 . (Currently Amended) The method as claimed in claim 7, further comprising: 
determining from the us e r sp e cific r e cord authorization and authentication profile 

associated with said user when said condition exists during a call session between a user 
terminal and a service provider node. 

12. (Currently Amended) The method as claimed in claim 7, further comprising: 
indicating, via said user sp e cific record authorization and authentication profile , when 

access to said service is permitted without determining, from data stored at a server node in 
said home network, whether access is permitted. 

13. (Cancelled) 

14. (Currently Amended) The method as claimed in claim 7, further comprising: 
generating a register message at a user terminal and transmitting said register message 
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to a local server node; 

determining whether a condition indicated by said user specific r e cord an 
authorization and authentication profile stored at said local server node is satisfied; 

generating an access message at said local server node indicating that access to said 
service is permitted; and 

transmitting said access message to a service provider node. 

15. (Currently Amended) The method as claimed in claim 14, fiirther comprising: 
prior to said storing of said user sp e cific r e cord authorization and authentication 

profile, generating a request message at said local server node and transmitting said request 
message to a hom e authentication, authorization and accounting s e rv e r of th e us e r the 
authentication and authorization device : and 

transferring receiving data comprising said user specific record authorization and 
authentication profile firom said home auth e ntication, authorization and accounting s e rver 
authentication and authorization device to said local s e rv^ e r nod e responsive to said request 
message. 

16. (Currently Amended) The method as claimed in claim 7, fiirther comprising: 
generating an invite message at a user terminal and transmitting said invite message to 

a local server node; 

determining whether a condition indicated by said user sp e cific record an 
authorization and authentication profile stored at said local server node is satisfied; 
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generating an access message at said local server node indicating that access to said 
service is permitted; and 

transmitting said access message to a service provider node. 

17. (Currently Amended) The method as claimed in claim 7, wherein said us e r 
characteristic comprises information indicates whether said user is authorized to access said 
service. 

18. (Ciirrently Amended) The method as claimed in claim 7, wherein said user 
charact e ristic compris e s information indicates whether said user is authenticated to access 
said service. 

19. (Currently Amended) The method as claimed in claim 7, wherein said 
condition determines the a frequency at which said uker is to be at legist one of authorized or 
authenticate d, or both, during a call session between said a user terminal and a service 
provider node. 

20. (Cancelled) 

21. (Currently Amended) An apparatus, comprising: 

r e c e iving means for r e ceiving at least one interface configured to receive a message 
from a user terminal ; storing means for storing a user spooifio r e cord and to receive an 
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authorization and authentication profile associated with a user from an authentication and 
authorization device located in a home network; 

a memory configured to store the authorization and authentication profile associated 
with a ttie use r, wherein the authorization and authentication profile contains information 
which allows the user to be authorized and authenticated directly with the apparatus without 
contacting the authentication and authorization device, and wherein the information further 
includes indicating a condition that, when satisfied, determines that a us e r characteristic is to 
be verified with a hom e network prior to providing the user with acce s s to a servic e the 
authentication and authorization device is to be contacted : and 

g e n e rating m e ans for g e n e ratin g the apparatus configured , in response to said us« 
specific r e cord authorization and authentication profile , to generate an access message to 
provide said a user with access to smd a service from a service provider node, wherein the 
condition is that authorization and authentication is verified with the authentication and 
authorization device when ^ a number of simultaneous sessions is equal to a predetermined 
number. 



22-28. (Cancelled) 

29. (Currently Amended) A method, comprising: 

storing an authorization and authentication profile, associated with a user, wherein the 
authorization and authentication profile is stored at a serving node in a serving network 
wherein the authorization and authentication profile is received from an authentication and 
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authorization device located in a home network : and 

using said authorization and authentication profile at said serving node, wherein said 
authorization and authentication profile contains informatio n which allows the user to be 
authorized and authenticated directly with the serving node in the serving network without 
contacting the authentication and authorization device, wherein the information further 
includes indicating a condition that, when satisfied, determines that a us e r oharact e ristio is to 
b e v e rifi e d with a hom e n e twork prior to providing access to said s e rvic e the authentication 
and authorization device is to be contacted , and wherein the condition is that authorization 
and authentication is verified with the authentication and authorization device when the a 
number of simultaneous sessions is equal to a predetermined number is equal to a 
predetermined number. 

30. (Currently Amended) An apparatus, comprising: 
an interface configured to receive a message fi^om a user terminal; and 
a receiver configured to receive data comprising an authorization and authentication 
profile fi-om an authentication and authorization device located in a home network: 
a memory configured to store said authorization and authentication profile: 
a processor configured to use a user specific record an authorization and 
authentication profile associated with said use r terminal, wherein the authorization and 
authentication profile contains information which allows a user to be authorized and 
authenticated directly with the apparatus without contacting an authentication and 
authorization device located in a home network, and wherein the information further includes 
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to indicat e a condition that, when satisfied, determines that a user characteristic is to b e 
v e rifi e d with a hom e n e twork prior to providing said us e r with acc e ss to a s e rvic e the 
authentication and authorization device is to be contacted, wh e r e in the us e r sp e cific r e cord is 
stored in a server node, and 

the processor configured to g enerate, in response to said us e r sp e cific record 
authorization and authentication profile , an access message to provide said user with access to 
smd a service fi-om a service provider node, wherein the condition is that authorization and 
authentication is verified with the authentication and authorization device when Sie a number 
of simultaneous sessions is equal to a predetermined number. 

3 1 . (Currently Amended) An apparatus, comprising: 
a processor configured to use a us e r sp e cific r e cord an authorization and 
authentication profile associated with a use r, wherein the authorization and authentication 
profile contains information which allows the user to be authorized and authenticated directly 
with the apparatus without contacting the authentication and authorization device, and 
wherein the information further includes to indicat e a condition that, when satisfied, 
determines that the authentication and authorization device is to be contacted a r^jser 
characteristic io to b e v e rifi e d with a hom e n e twork prior to providing said user with acc e ss to 
a servic e , wh e r e in th e us e r specific record is stored in a serv^ e r node , and 

the processor configured to g enerate, in response to said us e r sp e cific r e cord 
authorization and authentication profile , an access message to provide said user with access to 
smd a service fi-om a service provider node, wherein the condition is that authorization and 
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authentication is verified with the authentication and authorization device when the a number 
of simultaneous sessions is equal to a predetemiined number. 

32. (Previously Presented) The apparatus as claimed in claim 30, further 
comprising: 

a transmitter configured to transmit said access message to the service provider node. 

33. (Cancelled) 

34. (Previously Presented) The apparatus as claimed in claim 30, the apparatus 
comprising a serving or proxy-call session control function node. 

35. (Currently Amended) The apparatus as claimed in claim 30, wherein said usaf 
sp e cific r e cor d authorization and authentication profile comprises a first data field identifying 
said user and a second data field determining when at least one of authentication er and 
authorizatio n, or both, of said user is required in order to access said service. 

36. (Cancelled) 

37. (Currently Amended) The apparatus as claimed in claim 31, wh e r e in said 
controller furth e r compris e s comprising storage configured to store a user specific record the 
authorization and authentication profile . 
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38. (Previously Presented) The apparatus as claimed in claim 31, further 
comprising: 

a transmitter configured to transmit said access message to the service provider node. 

39. (Cancelled) 

40. (Previously Presented) The apparatus as claimed in claim 31, the apparatus 
comprising a serving or proxy-call session control function node. 

41 . (Currently Amended) The apparatus as claimed in claim 3 1 , wherein said ^sar 
sp e cific r e cord authorization and authentication profile comprises a first data field identifying 
said user and a second data field determining when at least one of authentication er and 
authorizatio n, or both, of said user is required in order to access said service. 

42. (Currently Amended) A method, comprising: 

receiving a message firom a user terminal; 

receiving data comprising said authorization and authentication profile, where the data 
is received from an authentication and authorization device located in a home network: 

using a us e r specific record an authorization and authentication profile associated with 
a user of said user terminal, wherein the authorization and authentication profile contains 
information which allows the user to be authorized and authenticated directlv with a server 
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node without contacting the authentication and authorization device, wherein the information 
further includes indicating a condition that, when satisfied, determines that a us e r 
charact e ristic is to b e v e rifi e d with a hom e n e twork prior to providing said u se r with acc e ss to 
a s e rvic e the authentication and authorization device is to be contacted , and wherein the user 
sp e cific record authorization and authentication profile is stored in a the server node; and 

generating, in response to said us e r sp e cific r e cord authorization and authentication 
profile , an access message providing said user with access to said a service firom a service 
provider node, wherein the condition is that authorization and authentication is verified with 
the authentication and authorization device when ^ a number of simultaneous sessions is 
equal to a predetermined number. 

43. (Previously Presented) The method as claimed in claim 42, further 
comprising: 

transmitting said access message to the service provider node. 

44. (Cancelled) 

45. (Currently Amended) The method as claimed in claim 42, wherein said «s» 
sp e cific r e cor d authorization and authentication profile comprises a first data field identifying 
said user and a second data field determining when at least one of authentication ef -and 
authorizatio n, or both, of said user is required in order to access said service. 



14 



S,N.: 10/500,370 
Art Unit: 2617 

46. (Currently Amended) A method, comprising: 

receiving data comprising an authorization and authentication profile, where the data 
is received fi-om the authentication and authorization device: 

using a user specific record an authorization and authentication profile associated with 
a use r, wherein the authorization and authentication profile contains information which 
allows the user to be authorized and authenticated directly with a server node without 
contacting an authentication and authorization device located in a home network, wherein the 
information fiirther includes indicating a condition that, when satisfied, determines that a user 
characteristic is to b e verified with a hom e network prior to providing said user with access to 
a s e rvic e the authentication and authorization device is to be contacted , and wherein the useF 
sp e cific record an authorization and authentication profile is stored in a the server node; and 

generating, in response to said us e r sp e cific r e cord authorization and authentication 
profile , an access message providing said user with access to said a service fi-om a service 
provider node, wherein the condition is that authorization and authentication is verified with 
the authentication and authorization device when the a number of simultaneous sessions is 
equal to a predetermined number. 

47. (Previously Presented) The method as claimed in claim 46, fiirther 
comprising: 

transmitting said access message to the service provider node. 

48. (Cancelled) 
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49. (Currently Amended) The method as claimed in claim 46, wherein said «s«f 
specific record authorization and authentication profile comprises a first data field identifying 
said user and a second data field determining when at least one of authentication or and 
authorizatio n, or both, of said user is required in order to access said service. 

50. (Currently Amended) A comput e r program e mbodi e d on a computer-readable 
storage medium embodying a computer program , the program configured to control a 
executable by a p rocessor to perform a process, the process operations comprising: 

receiving a message fi-om a user terminal; 

receiving data comprising an authorization and authentication profile, where the data 
is received fi-om an authentication and authorization device: 

using a user specific record an authorization and authentication profile associated with 
a user of the user terminal, wherein the authorization and authentication profile contains 
information which allows the user to be authorized and authenticated directly with a server 
node without contacting an authentication and authorization device located in a home 
network, wherein the information further includes indicating a condition that, when satisfied, 
determines that a user charact e ristic is to be verified with a home network prior to providing 
said us e r with access to a s e rvic e the authentication and authorization device is to be 
contacted , and wherein the us e r sp e cific r e cord authorization and authentication profile is 
stored in a ttie server node; and 

generating, in response to said user specific record authorization and authentication 
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profile , an access message providing said user with access to said a^service firom a service 
provider node, wherein the condition is that authorization and authentication is verified with 
the authentication and authorization device when the a number of simultaneous sessions is 
equal to a predetermined number. 

5 1 . (Currently Amended) A computer program embodi e d on a computer-readable 
storage medivmi embodving a computer program, the program configur e d to control a 
executable bv a processor to perform a proc e ss, th e proc e ss operations comprising: 

using a us e r specific record an authorization and authentication profile associated with 
a use r, wherein the authorization and authentication profile contains information which 
allows the user to be authorized and authenticated directly with a server node without 
contacting an authentication and authorization device located in a home network, wherein the 
information further includes indicating a condition that, when satisfied, determines that a us e r 
charact e ristic is to b e verifi e d with a home network prior to providing s aid us e r with access to 
a s e rvic e the authentication and authorization device is to be contacted , and wherein the «ser 
sp e cific r e cord authorization and authentication profile is stored in a ttie server node; and 

generating, in response to said user specific record authorization and authentication 
profile , an access message providing said user with access to smd a service firom a service 
provider node, wherein the condition is that authorization and authentication is verified with 
the authentication and authorization device when the a number of simultaneous sessions for 
the user is equal to a predetermined number. 
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